Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-3414
HistoryJul 19, 2013 - 2:36 p.m.

CVE-2012-3414

2013-07-1914:36:31
CWE-79
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.012

Percentile

85.6%

JSON

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the โ€œExternalInterface.callโ€ function.

Affected configurations

Nvd
Node
swfupload_projectswfuploadRangeโ‰ค2.2.0.1
OR
swfupload_projectswfuploadMatch1.0.2
OR
swfupload_projectswfuploadMatch2.0.2
OR
swfupload_projectswfuploadMatch2.1.0
OR
swfupload_projectswfuploadMatch2.2.0
OR
tinymceimage_managerMatch1.1
OR
wordpresswordpressRangeโ‰ค3.3.1
OR
wordpresswordpressMatch-
OR
wordpresswordpressMatch3.0
OR
wordpresswordpressMatch3.0.1
OR
wordpresswordpressMatch3.0.2
OR
wordpresswordpressMatch3.0.3
OR
wordpresswordpressMatch3.0.4
OR
wordpresswordpressMatch3.0.5
OR
wordpresswordpressMatch3.0.6
OR
wordpresswordpressMatch3.1
OR
wordpresswordpressMatch3.1.1
OR
wordpresswordpressMatch3.1.2
OR
wordpresswordpressMatch3.1.3
OR
wordpresswordpressMatch3.1.4
OR
wordpresswordpressMatch3.2
OR
wordpresswordpressMatch3.2.1
OR
wordpresswordpressMatch3.3

Related

seebug 1
zdt 2
cve 4
packetstorm 4
prion 4
typo3 1
ubuntucve 2
securityvulns 5
patchstack 1
openvas 2
threatpost 2
cvelist 2
debiancve 2
nvd 3
nessus 1
seebug
seebug
Turbomail้‚ฎไปถ็ณป็ปŸXSS-1
2014-12-24 00:00:00
zdt
zdt
Dotclear XSS Vulnerabilities
2013-04-14 00:00:00
Wordpress Plugin (wp-e-commerce v3.8.9.5) Multiple Vulnerabilities
2014-01-23 00:00:00
cve
cve
CVE-2012-3414
2013-07-19 14:36:31
CVE-2013-4146
2022-06-30 13:15:08
CVE-2013-4145
2014-04-27 04:32:01
packetstorm
packetstorm
Dotclear 2.4.4 Cross Site Scripting / Content Spoofing
2013-04-13 00:00:00
WordPress 3.3.1 swfupload.swf Cross Site Scripting
2012-11-09 00:00:00
SWF Upload Cross Site Scripting
2012-11-13 00:00:00
prion
prion
Cross site scripting
2013-07-19 14:36:00
Cross site scripting
2012-04-21 23:55:00
Design/Logic Flaw
2022-06-30 13:15:00
typo3
typo3
Cross-Site Scripting Vulnerability in TYPO3 Core
2012-07-04 00:00:00
ubuntucve
ubuntucve
CVE-2012-3414
2013-07-19 00:00:00
CVE-2012-2399
2012-04-21 00:00:00
securityvulns
securityvulns
XSS vulnerability in swfupload in WordPress
2012-11-18 00:00:00
CS and XSS vulnerabilities in SWFUpload
2013-03-11 00:00:00
XSS and CS vulnerabilities in Dotclear
2013-05-06 00:00:00
patchstack
patchstack
WordPress SWFUpload Plugin <= 2.2.0.1 - XSS #1
2012-06-14 00:00:00
openvas
openvas
FreeBSD Ports: typo3
2012-08-10 00:00:00
TYPO3 SWFUpload movieName Cross Site Scripting Vulnerability
2014-01-02 00:00:00
threatpost
threatpost
Issue with SWFUploader Could Lead to XSS Vulnerabilities, Content Spoofing
2013-03-12 19:10:36
Yahoo Mail Breach Linked to Old WordPress Vulnerability
2013-02-01 03:42:54
cvelist
cvelist
CVE-2012-3414
2013-07-19 10:00:00
CVE-2012-2399
2012-04-21 23:00:00
debiancve
debiancve
CVE-2012-3414
2013-07-19 14:36:31
CVE-2012-2399
2012-04-21 23:55:01
nvd
nvd
CVE-2013-4145
2014-04-27 04:32:01
CVE-2012-2399
2012-04-21 23:55:01
CVE-2013-4146
2022-06-30 13:15:08
nessus
nessus
WordPress < 3.3.2 Multiple Vulnerabilities
2012-05-09 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.012

Percentile

85.6%

JSON
Related for NVD:CVE-2012-3414
seebug1zdt2cve4packetstorm4prion4typo31ubuntucve2securityvulns5patchstack1openvas2threatpost2cvelist2debiancve2nvd3nessus1